The information below is a concise, intelligible and clear summary of the information set out in the Privacy policy regarding the Controller, the purpose and manner of processing personal data and your rights in connection with that processing, in the form required to satisfy the GDPR information obligation.
Who is the data controller?
The Controller of Personal Data (hereinafter the Controller) is “SONTO Sp. z o.o.”, operating at ul. Bagienna 36c, 70-772 Szczecin, Poland, tax identification number (NIP): 9552564863, providing services by electronic means through the Shop.
How can the data controller be contacted?
- Postal address – SONTO Sp. z o.o., ul. Bagienna 36c, 70-772 Szczecin, Poland
- E-mail address – kontakt@sonto.pl
- Telephone – +48 509 810 910
- Contact form – available on the Contact page
Has the Controller appointed a Data Protection Officer?
Under Article 37 GDPR the Controller has not appointed a Data Protection Officer. In matters concerning data processing, please contact the Controller directly.
Where do we obtain personal data from?
We obtain the data from the data subjects themselves.
What is the scope of the data processed?
We process ordinary personal data provided voluntarily. In particular: first name and surname or company name, tax identification number, delivery address and invoice address, e-mail address, telephone number, IP address and the content of the message sent through the contact form.
We obtain the data through:
- the order form and the request for a quote,
- the contact form,
- automated analytics tools (Google Analytics 4, Google Tag Manager) — as regards technical and behavioural data, only after consent has been given in the cookie banner.
What are the purposes of the processing?
- Performance of the order and of the sales contract, including preparation of the offer and the transport quote.
- Communication with Users in matters relating to the Shop and to the protection of personal data.
- Handling complaints and returns.
- Analytics and statistics on the use of the Shop — on the basis of consent.
- Marketing activities, including remarketing — on the basis of consent.
- Compliance with legal obligations, in particular tax and accounting obligations.
- Pursuit of the legitimate interests of the Controller.
What are the legal bases for the processing?
The Shop collects and processes data on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR):
- Article 6(1)(a) – the data subject has given consent to the processing of their personal data for one or more specific purposes,
- Article 6(1)(b) – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract,
- Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject, in particular one arising from tax and accounting law,
- Article 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the controller.
In addition: the Polish Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000) and the Act of 16 July 2004 — Telecommunications Law (Journal of Laws 2004, No. 171, item 1800).
What is the legitimate interest of the Controller?
Establishing, exercising or defending legal claims (Article 6(1)(f) GDPR), including protection of the Controller’s rights, assessment of the risk posed by potential customers, evaluation of planned marketing campaigns and direct marketing.
For how long do we process personal data?
- Data from the contact form is deleted or anonymised within 30 days of the end of the correspondence.
- Data relating to an order is kept for the period of its performance and for the limitation period for claims under the contract.
- Data contained in accounting documents is kept for 5 years, counting from the end of the calendar year in which the tax payment deadline fell.
- In the event of a breach or suspected breach of the Terms and conditions we may keep the data for no longer than 3 years from the request for its deletion.
What rights do you have?
You have the right of access to your data, to rectification, erasure, restriction of processing, data portability, to object and to withdraw consent at any time. You can withdraw cookie consent through the consent settings icon in the Shop or the “Cookie settings” link in the footer.
You also have the right to lodge a complaint with a supervisory authority. In the Republic of Poland this is the President of the Personal Data Protection Office — Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl.
Details of how the data is processed and of the entities involved in that process can be found in the Privacy policy.
This page is a translation of a document drawn up in Polish. In the event of any discrepancy between this translation and the Polish version, the Polish version prevails.